Bob Mottram
							
						 | 
						
							
								9741890691
								
							
						 | 
						
							stig test for tripwire database
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								054c452d71
								
							
						 | 
						
							Not using aide
							
							
							
Check for tripwire cron entry instead 
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								5f8faa36e2
								
							
						 | 
						
							Additional stig test descriptions
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								e634287f32
								
							
						 | 
						
							Avoid nfs altogether
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								4a8144e335
								
							
						 | 
						
							Test is not relevant because systemd is being used
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								4305bb71d1
								
							
						 | 
						
							Test the password system
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								c9a1c8b510
								
							
						 | 
						
							ME might affect many x86 installs, so instead of stopping the show just remove the interface, which reduces risks a little
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								cbddf8308f
								
							
						 | 
						
							Check for AMT within tests, because it could get turned on after installation
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								95702debd8
								
							
						 | 
						
							stig tests option to lockdown permissions
							
							
						 | 
						8 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								1c392150aa
								
							
						 | 
						
							Show passes and fails
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								3ae78c3765
								
							
						 | 
						
							Optionally show all stig test passes
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								cf74c113cb
								
							
						 | 
						
							Null passwords not permitted
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								b0ed59de5f
								
							
						 | 
						
							Remove messages when running STIG
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								0e47f66928
								
							
						 | 
						
							Test STIG separately and with no output if all tests pass
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								8f11ab2102
								
							
						 | 
						
							Don't check bluetooth
							
							
							
In most cases it doesn't exist and if it does it gets turned off in the config 
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								fa9c3b6f22
								
							
						 | 
						
							Prefer bettercrypto cyphers
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								28e8155750
								
							
						 | 
						
							Modules aren't installed anyway
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								b872f429c6
								
							
						 | 
						
							Invert logic
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								496f3cd4f2
								
							
						 | 
						
							Not needed, handled by unattended upgrades
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								05a6efe365
								
							
						 | 
						
							This only applies in a typical server scenario where there are lots of users on one machine
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								e6d4f1af0c
								
							
						 | 
						
							Logging is already minimised by default
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								b9ad7e57a3
								
							
						 | 
						
							ipv6 can be used
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								01c8ac8b60
								
							
						 | 
						
							Passwords are usually random so this doesn't apply
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								e51e1a9ce2
								
							
						 | 
						
							Help option
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								a76a4d22f9
								
							
						 | 
						
							Disk encryption is optional
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								83ef278c13
								
							
						 | 
						
							Done via control panel
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								4a4fd7899f
								
							
						 | 
						
							root mail
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								7a66ad8571
								
							
						 | 
						
							Use tripwire
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								2fb341b487
								
							
						 | 
						
							In most cases the boot loader isn't grub
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								b8b0637e13
								
							
						 | 
						
							Set maximum login attempts
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								5e7a01f193
								
							
						 | 
						
							Not applicable for random passwords
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								f9d646cb31
								
							
						 | 
						
							Not applicable to random passwords
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								de1eb3fe2c
								
							
						 | 
						
							Passwords are randomly generated
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								d6323eeaa8
								
							
						 | 
						
							Doesn't apply with this system
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								f20c6aebf3
								
							
						 | 
						
							Ignore bogons
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								a3e4aaa57b
								
							
						 | 
						
							Removing x11-common would remove some essential stuff, including emacs
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								4add2899d7
								
							
						 | 
						
							Don't use postfix
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								e5b04a2d1f
								
							
						 | 
						
							Don't lock inactive accounts
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								bc6f387506
								
							
						 | 
						
							Don't disable avahi
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								aa38f141c6
								
							
						 | 
						
							Not using postfix
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								1f0ac1f3ce
								
							
						 | 
						
							Security Technical Implementation Guide tests based upon RHEL/hardenedlinux
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								0147cadc53
								
							
						 | 
						
							xmpp password changes
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								1f5173d13d
								
							
						 | 
						
							Test that onion ports are unique
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								557b25b4a8
								
							
						 | 
						
							Change email address
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								9f9f825f87
								
							
						 | 
						
							app functions for changing passwords
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								580fe547dc
								
							
						 | 
						
							Placeholder reconfigure functions
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								79ca882147
								
							
						 | 
						
							Add tests for presence of restrore functions within app scripts
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								c4abe22744
								
							
						 | 
						
							Move apps into share directory
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								5460385221
								
							
						 | 
						
							Placeholder functions for app upgrades
							
							
						 | 
						9 年之前 | 
					
				
					
						
							
								   Bob Mottram
							
						 | 
						
							
								861c1d8bc0
								
							
						 | 
						
							Local or remote backups
							
							
						 | 
						9 年之前 |